WORLD INTELLECTUAL PROPERTY ORGANIZATION 
International Bureau 




PCT 

INTERNATIONAL APPLICATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCT) 



(51) International Patent Classification 6 : 
H04L 9/00 



Al 



(11) International Publication Number: WO 98/42098 

(43) International Publication Date: 24 September 1998 (24.09.98) 



(21) International Application Number: PCT/US98/04658 

(22) International Filing Date: 1 1 March 1998 (1 1.03.98) 



(30) Priority Data: 
08/818,132 



14 March 1997 (14.03.97) 



US 



(71) Applicant: CRYPTOWORKS, INC. [US/US]; 2084 Union 

Street, San Francisco, CA 94123 (US). 

(72) Inventor: LeBOURGEOIS, John, H.; 193 San Carlos Way, 

Novato, CA 94945 (US). 

(74) Agent: WOLFELD, Warren, S.; Fliesler, Dubb, Meyer and 
Lovejoy LLP, Suite 400, Four Embarcadero Center, San 
Francisco, CA 941 1 1-4156 (US). 



(81) Designated States: AL, AM, AT, AU, AZ, BA, BB, BG. BR, 
BY, CA, CH, CN, CU, CZ, DE, DK, EE, ES, FI, GB, GE, 
GH, GM, GW. HU, ID, IL, IS. JP. KE, KG, KP, KR, KZ, 
LC, LK. LR. LS. LT, LU, LV, MD, MG, MK, MN, MW, 
MX, NO, NZ, PL, PT, RO, RU, SD, SE, SG, SI, SK, SL, TJ, 
TM, TR, IT, UA, UG, UZ, VN, YU, ZW, ARIPO patent 
(GH, GM, KE, LS, MW, SD, SZ, UG, ZW), Eurasian patent 
(AM, AZ, BY, KG, KZ, MD, RU, TJ, TM), European patent 
(AT, BE, CH, DE, DK, ES, FI, FR, GB. GR, IE, IT, LU, 
MC, NL, PT, SE), OAPI patent (BF, BJ, CF, CG P CI, CM, 
GA, GN, ML, MR, NE, SN, TD, TG). 



Published 

With international search report. 



(54) Title: DIGITAL PRODUCT RIGHTS MANAGEMENT TECHNIQUE 

(57) Abstract 

A digital product is freely distributed through uncon- 
trolled channels in encrypted form (108). Security frag- 
ments) of the encrypted product are withheld (102), and pro- 
vided only upon communication with license server (104). 
The customer uses reader software (106) to purchase a U- Product — 

cense. Such software (106) examines components then 
present on the reader system to develop a reader system 
signature, which the license server (106) uses to encrypt Htm@t$m 
the product decryption key and the security fragments be- 
fore sending them to the reader system. When the customer 
wishes to use the product, a new reader system signature is 
generated and used to decrypt the product fragments. 
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DIGITAL PRODUCT RIGHTS MANAGEMENT TECHNIQUE 

BACKGROUND 

i. Field of the Invention 
5 The invention relates to controlled distribution 

of digital products in a manner that tends to ensure 
that authors receive proper royalty payments for their 
work. 

10 2 . Description of Related Art 

Digitally encoded products, such as software, 
music, images and video segments are extremely 
important in today's economy. However, the ease and 
economy with which perfect copies can be made of 

15 digitally encoded products has promoted the widespread 
unauthorized copying and distribution of such products 
through such channels as user- to -user copying and 
sharing, digital data networks such as the Internet, 
and CD-ROM publishing. These distribution channels 

2 0 have made it difficult for the creators and copyright 
holders of such products to regulate the use of their 
products or to receive payment and registration 
information from their users. Consequently, digital 
product producers often forfeit substantial revenues 

25 and valuable information about their customer base and 
potential markets, while businesses and universities 
find themselves subject to legal prosecution and 
intimidation for copyright infringement. 

But the problem of unauthorized distribution of 

30 digital products is not limited to the simple loss of 
revenues which rightfully belong to the original 
developer of the product, although that problem can be 
substantial by itself. There is also the additional 
problem that developers will be less willing to spend 
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substantial time and money in developing new digital 
products if they cannot depend on a market which pays 
fair value for their products. 

In the past, when copying and distribution of 
5 products was more expensive , time consuming and 
imperfect, the creators of digital products could 
depend in part on economic factors as well as legal 
protections to minimize unauthorized copying and 
distribution. Neither is effective today with digital 

10 products, easy and inexpensive channels of 
distribution, and huge numbers of people participating 
in the illicit trade. 

One technique that has been developed to deter 
unauthorized copying of digital products involves copy 

15 protection mechanisms built into hardware or software. 
However, copy protection mechanisms sometimes can 
inconvenience users who have a legitimate need for 
making copies. Copy protection mechanisms also can 
prevent digital product developers from taking 

20 advantage of the new distribution channels, such as the 
Internet . 

Another method for controlling the distribution 
of digital products is described in Commerce Direct 
International (CDI) , "Electronic Commerce", World Wide 

25 Web URL http://www.cdi.net/electron/commerce.htm 
(visited March 23, 1996) and CDI, "CDI In Action", World 
Wide Web URL http://www.cdi.net/cdiactio/cdinactn.htm 
(visited March 23, 1996), both incorporated herein by 
reference. The mechanisms described in these documents 

3 0 call for a customer to review an on-line catalog of 
products and choose one to buy. The customer 1 s 
software then sends encrypted credit card information 
to the product distributor, and the product distributor 
transmits the product to the customer in a strongly 
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encrypted form. The customer's software then uses a 
"secret key" to decrypt the product and use it. Secure 
direct modem connections may be used instead of 
Internet connections at various parts of the process in 
5 order to further ensure that no one else can use the 
encrypted product. 

The CDI technique suffers from at least two 
problems. First, while the encryption of a data 
product during transmission may be very strong, it is 

10 still theoretically possible for an unauthorized third 
party to decipher it. Second, even if the product 
remains secure during transmission, once it is 
decrypted by the customer, CDI's strong encryption 
techniques no longer protect the product against 

15 further unauthorized distribution. The above- cited 
documents indicate that content as well as executables 
can be "locked" to a specific registered machine while 
still allowing for unrestricted distribution of the 
software in a crippled or time -dated mode, but the 

2 0 documents do not explain how this is to be 

accomplished. 

In Schull U.S. Patent No. 5,509,070, incorporated 
by reference herein, Schull describes a technique for 
distributing digital products (specifically software) 
25 by selling a password to the user. The user uses the 
password to unlock advanced features of the product, 
but the password is usable only on one machine. Thus, 
the technique allows users to freely distribute 
software to other machines and other potential users, 

3 0 but does not allow other users to take advantage of 

advanced features of the software without obtaining a 
new password which is specific to the new machine. In 
the Schull method, the user generates a "passwordable- 
ID" either from the user's voice, by reading the serial 
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number of the machine's CPU, or by any of a number of 
other suggested methods. The passwordable- ID is 
transmitted to a licensing system which uses the 
passwordable -ID to generate an encrypting seed for the 
5 software advanced features. The encrypted encrypting 
seed is then transmitted back to the user as a key for 
unlocking the advanced features of the software. 

One drawback, of the Schull method is that the 
password ultimately provided by the licensing system to 

10 the user is stored on the user's machine. Without 
certain extraordinary copy protection mechanisms 
applied to the password, the password could simply be 
copied to a new machine, thereby allowing a different 
user to use the advanced features of a pirated version 

15 of the product without paying a fair licensing fee. 
The extraordinary methods suggested by Schull to 
protect the password as stored on the user's machine, 
reimposes many of the same problems that formed the 
basis for finding non- objectionable copy protection 

20 mechanisms in the first place. 

Several other technologies for preventing 
unauthorized distribution of digital products are set 
forth in the following World Wide Web pages: Northeast 
Consulting Resources, Inc., "Digital Rights Management 

25 Technologies", Web page URL http://www.ncri.com/articles 
/rights_management/ (October 1995: visited November 19, 
1996) ; Intertrust Technologies Corporation, Web pages 
http: / /www. intertrust . com/architecture/overview. html , 
http : //www . intertrust . com/architecture/ flow . html , 

3 0 http: //www. intertrust . com/archi tec ture/stc . html , 
http: //www. intertrust . com/products/applications . html , 
ht tp : //www . intertrust. com/products/sdk. html, 
ht tp : //www .intertrust. com/ about / whoweare . html , 
http: //www. intertrust . com/about/vision . html (all 
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visited November 19, 1996, and all incorporated herein 
by reference) . However, all of the technologies 
described in these references suffer from one or all of 
the problems mentioned above, as well as others. 
5 Accordingly, there is a deeply felt need for a 

new technology which will control the distribution of 
. digital products via the Internet and other 
uncontrolled distribution channels such that a fair 
return to the originator of the product can be ensured 
10 without unduly hampering wide and free distribution of 
sufficient information about the digital product to 
enable customers to decide whether to purchase a 
license. 

15 SUMMARY OF THE INVENTION 

According to the invention, roughly described, a 
digital product is freely distributed through 
uncontrolled channels in encrypted form. Unencrypted 
preview material may also be provided in order to help 

20 the customer decide whether to purchase a license. In 
an aspect of the invention, one or more fragments of 
the encrypted product are withheld from uncontrolled 
distribution, and provided only upon communication with 
a license server. Unlike prior art mechanisms, which 

25 rely on practical limitations of computing power in 
order to prevent unauthorized product decryption, the 
technique of the present invention renders it literally 
impossible for an eavesdropper to recover the complete 
decrypted product without contacting the licensor. The 

3 0 product is not merely encrypted; to the extent of the 
security fragments, it is not even there. 

In a second aspect of the invention, again 
roughly described, the customer purchases a license 
through the use of reader software which examines the 
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components then present on the reader system to develop 
a reader system signature (RSS) . The reader system 
signature is transmitted to a license server which uses 
it either to encrypt the product decryption key, or to 
5 further encrypt the security fragments, or both, before 
sending them to the reader system. The reader system 
signature is not stored on the reader system. Rather, 
at the time that the customer would like to use the 
digital product (view an image or movie, listen to a 

10 sound or execute software, for example) , a new reader 
system signature is generated in the same manner as the 
original reader system signature. The new reader 
system signature is used to decrypt the product 
decryption key and/or the double -encrypted security 

15 fragments, only at the time of use. If the user is 
attempting to use the digital product on a different 
machine, such as would be the case in the event of 
unauthorized distribution, then the new reader system 
signature will not work properly and the unauthorized 

2 0 user will not be able to use the digital product. 

The above second aspect of the invention could be 
problematical in the event that the user upgrades or 
modifies the reader system. A mechanism that 

regenerates the reader system signature each time a 
25 digital product is to be used could prevent a 
legitimate user from using the product after such an 
upgrade. Accordingly, in another aspect of the 
invention, the machine authorization of the reader 
system allows a certain amount of "upgrade drift" before 

3 0 it is deemed advisable to check for unauthorized use. 

In an embodiment, the reader system signature is 
determined by examining various components (hardware 
and/or software) of the reader system, to determine 
individual signatures for each component. The 
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individual component signatures are then combined to 
form the overall reader system signature, for example 
by a weighted sum of the individual component 
signatures or by concatenating the individual component 
5 signatures together. If the reader system signature is 
determined on the basis of a weighted sum (or 
equivalent ly, a weighted average) of the individual 
component signatures, then the amount of permissible 
upgrade drift can be expressed as a percentage; that 

10 is, if the reader system signature generated upon usage 
of the digital product differs from the reader system 
signature generated at the time the product is 
purchased by no more than a predetermined percentage or 
fraction, then the usage is considered authorized. If 

15 the reader system signature is generated as a 
concatenation of the individual component signatures, 
then the number of components which differ at usage 
time relative to purchase time can be specified not to 
exceed a specific count . 

2 0 In a situation where the reader system signature 

generated at the time of purchase is not stored on the 
reader system, it can instead be uploaded to a license 
server. If the reader system signature generated at 
usage time is found by the reader system not to 
25 properly decrypt either the product decryption key or 
the product itself, then in an embodiment, the reader 
system can automatically contact the license server for 
reauthorization. The reader system uploads the newly 
generated reader system signature, and the license 

3 0 server performs the upgrade drift test in comparison 

with the reader system signature that was stored on the 
license server at the time of purchase. If the license 
server determines that the newly generated reader 
system signature is within the permissible upgrade 



WO 98/42098 



PCT/US98/04658 



- 8 - 

drift parameter, then it transmits a new product 
decryption key and/or new product security fragments, 
back to the reader system, encrypted according to the 
new reader system signature. The reader system is then 
5 able to decrypt the digital product and play, view or 
otherwise use it in the desired manner. (In order to 
assist in evaluating the permissibility of an upgrade 
drift, one embodiment of the reader system also uploads 
the raw component signatures of the computer system. 

10 This allows customer support to determine which 
components have changed.) 

In an embodiment of the invention, the reader 
system signature is generated in dependence upon a 
component whose individual component signature carries 

15 with it external assurances of substantial uniqueness 
among all computer systems which could reasonably pose 
as authorized reader systems. Such a component 
signature can be used by itself, or in conjunction with 
other component signatures, in order to generate the 

20 overall reader system signature. If used by itself, 
then upgrade drift is usually not permissible without 
manual re-val idat ion . 



BRIEF DESCRIPTION OF THE DRAWINGS 
25 The invention will be described with respect to 

particular embodiments thereof, and reference will be 
made to the drawings, in which: 

Fig. 1 is an overall symbolic diagram of a system 
according to the invention. 
30 Fig. 2 is a block diagram illustrating the 

structure of a typical reader system of Fig. 1. 

Fig. 3 illustrates the overall system flow for 
the authoring system of Fig. 1. 
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Fig. 4 is a' flow chart illustrating the flow of 
a product registration segment of Fig. 3. 

Fig. 5 is a flow chart illustrating the general 
operation of the reader system of Fig. 1. 
5 Fig. 6 is a flow chart of the product purchase 

preparation step of Fig. 5. 

Fig. 7 is a flow chart illustrating one technique 
for generating the reader system signature. 

Figs. 8 and 9 together constitute a flow chart of 
10 steps which takes place in the license server 104 in 
response to receipt of a product purchase package. 

Fig. 10 is a flow chart of the step in Fig. 8 in 
which the license server processes the customer's 
payment information. 
15 Figs. 11-13 together constitute a flow chart of 

the step in Fig. 5 in which the reader system plays the 
digital product. 

Fig. 14 is a flow chart illustrating the license 
server's operations in response to receipt of a re- 
20 validation package. 

Figs. 15 and 16 are alternative details of the 
step in Fig. 14 in which the license server determines 
whether the difference between the two R3S 1 s exceeds a 
threshold. 

25 

DETAILED DRSPRTPTTQN 

Fig. 1 is an overall symbolic diagram of a system 
according to the invention. The system has three 
primary components: an authoring system 102, a license 
30 server 104 and a reader system 106. In addition, the 
overall system is most useful when used with an 
uncontrolled distribution channel such as an insecure 
public distribution network 108 (e.g., the Internet). 
In general operation, the author or proprietor of one 
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or more digital products first uses the authoring 
system 102 to register with the license server 104 as 
an author. Author registration information is 

transmitted from the authoring system 102 to the 
license server 104, and an author ID is returned to the 
authoring system. 

When the author has a digital product to market, 
the product is provided to the authoring system 102, 
together with certain usage parameters. The usage 
parameters include a set of free usage parameters and 
one or more sets of paid usage parameters. The 
authoring system compresses and encrypts the digital 
product (compression is optional) , extracts one or more 
security fragments from the encrypted product and then 
15 packages the product for broadcast via the uncontrolled 
distribution network 108 and for upload to t.r.= ll;:^^ 
server 104. The authoring system then t.r-ir_&mi r- >: 
product registration package up to the license 'ssrvar 
104 and receives a product ID in return. "."'he s.utna?-? n- j 
20 system also makes the product :-;;:oc'.uCi : :7v ( .x* r z y. 
available on the uncontrolled distribution r*e*cwork ICS. 
Note that as used herein, a "product" ~an : ■\o'.v, " ii ; r,-\. 
more sub-products, all of which are ^ov^.^-ra.-j. „, 
to themselves be "products". 
25 When a customer is interested in a particular 

digital product, he or she can download the product 
broadcast package from the uncontrolled distribution 
network 108. The customer utilizes the reading system 
106 to perform those functions of the digital product 
3 0 which are freely authorized according to the free usage 
parameters that were previously specified by the 
author. Such functions can include, among other 
things, a preview of the digital product, and an 
indication of one or more licensing options which the 
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customer can purchase. If the customer chooses to 
purchase one of the license options, the reader system 
106 examines certain components of the reader system 
and, in dependence thereon, generates a reader system 
5 signature (RSS) . The reader system assembles a product 
purchase package including the RSS and payment 
information, and uploads it to the license server 104. 
The license server 104 processes the payment 
information and, if successful, transmits a product 
10 server download package back to the reader system. The 
reader system uses the product server download package 
to unlock the functions of the digital product which 
are authorized under the license option that the 
customer has purchased, and allows the user to use the 
15 product accordingly. In addition, the reader system 
106 performs fingerprint and/or watermark insertion as 
described hereinafter. 

The license server 104 performs a number of 
functions, including maintaining a database of 
20 registered authors and storing all of the product 
registration packages. The license server 104 also 
stores reader system signatures from customers, 
performs customer payment validation, as well as 
certain fraud detection functions as described below. 
25 The license server 104 also performs the functions of 
royalty payment clearing. Specifically, license 
royalties received from (or on behalf of) customers are 
properly accounted for and transferred to the proper 
authors after deduction of a commission. 
3 0 In Fig. 1, the authoring system 102, the license 

server 104 and the reader system 106 are each 
illustrated as a respective individual block. 
Depending on the embodiment, each block might contain 
no more than a single computer, or in different 
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embodiments, different blocks can contain more than one 
computer. In one embodiment, one or more of the blocks 
102, 104 and 106, for example the license server 104, 
contains a number of computers spread out over a great 
5 geographical area and interconnected by a network. The 
illustration of the authoring system 102, the license 
server 104, and the reader system 106 as single blocks 
is not intended to indicate that each must constitute 
only a single computer system or that each must be 
10 located at a respective single location. 

Nor is there any requirement that computers used 
to form the authoring system 102, the license server 
104, and the reader system 106 have any particular 
structure. Fig. 2 is a symbolic block diagram 
15 illustrating the structure of a typical computer system 
which may be used as an authoring system, a reader 
system, or a license server. It comprises a CPU 202 and 
cache memory 204, both connected to a CPU bus 206. 
Interface circuitry 208 is also connected to the CPU 
20 bus 206. The interface circuitry 208 is further 
connected to a main memory 210, as well as to two I/O 
buses: PCI-bus 212 and ISA-bus 214. Connected to the 
PCI -bus 212 are sound and game controllers 216, a 
network adapter 232 and a display adapter 218, the last 
25 of which is further^ connected to a monitor 220. 
Connected to the ISA-bus 214 is a hard disk drive 
controller 222, a CD-ROM drive controller 224, a floppy 
disk drive controller 226, various I/O ports 228, and 
a boot PROM 230. Most of the peripheral components 
30 illustrated in Fig. 2 include on-board configuration 
data which can be read by the CPU 202. In addition, 
the boot PROM 230 includes a portion which is writeable 
by the CPU 202 to store configuration data. In 
general, the software to operate the authoring system 
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102, the license server 104 or the reader system 106 is 
stored on the disk drive controlled by the disk: drive 
controller 222, and brought into main memory 210 as 
needed for execution. The computer system of Fig. 2 
5 communicates with the other systems of Fig. 1, and with 
the distribution network 108, if appropriate, via the 
network adapter 232. 

Fig. 3 illustrates the overall system flow for 
the authoring system 102. The authoring system flow is 

10 generally divided into two segments: an author 
registration segment 302 followed by one or more 
product registration segments 3 04. In the author 
registration segment 302, the author (or other 
proprietor) of one or more digital products enters his 

15 or her identification information. Such information 
can include, for example, the author's name, address, 
Social Security or other tax ID number, password or 
other challenge information (for confirmation of 
identity during customer service calls) , e-mail address 

20 and/or telephone number (step 306) . In a step 308, the 
authoring system uses this information to create an 
author registration package which is transmitted, in 
step 310, to the license server 104. The license 
server 104 adds the author and the author's 

25 identification information to its registered author 
database, and in step 312, the authoring system 102 
receives and stores and author ID from the license 
server 104. The communication between the authoring 
system 102 and the license server 104 in the author 

3 0 registration segment 302 should take place via digital 
certificate and one-time secure channel, or by secure, 
signed electronic mail. 

Fig. 4 is a flow chart illustrating the flow of 
a product registration segment 304 (Fig. 3) . In a step 
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402, the author identifies one of possibly many digital 
products to the authoring system 102 and enters usage 
parameters. The digital product is identified, for 
example, by identifying a filename within which the 
5 digital product is stored. The usage parameters can 
include such parameters as the number of copies which 
will be permitted to be made on the reader system, 
whether the reader system will be authorized to save 
the digital product to a hard disk, whether printing 

10 will be enabled, whether preview is enabled, and the 
amount of RSS drift which will be permitted on a reader 
system before manual reauthorization will be required. 
The usage parameters may be specified as several 
options, including a set of free usage parameters (for 

15 which no payment is required) and one or more options 
of purchasable usage parameters (functions requiring a 
purchased license) . In an embodiment, the author can 
also indicate at this point whether the product should 
be compressed . 

20 In a step 404, if preview is to be enabled, the 

reader system extracts the appropriate preview material 
with the assistance of the author. The entire digital 
product is then encrypted in a step 406. In the 
product encryption step 406, the product is first 

25 compressed (step 408) by any known algorithm. For 
example, the product can be compressed using a Lempel- 
Ziv algorithm or by a Huffman encoding algorithm. The 
compression step 408 is considered part of the product 
encryption step 406 because compression is, in effect, 

3 0 a form of encryption; it is very difficult to recover 
the original uncompressed product unless the algorithm 
used for compression is known. s Compression is optional 
because for certain kinds of products, the benefits to 
be gained by compression are outweighed by the 
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performance degradation that compression/decompression 
often entails* 

In a step 410 , a product encryption key is 
generated. The key can be generated in any known 
5 manner; for example, by a pseudo- random number 
generator using a seed derived from the time period 
between two successive user key strokes. In step 412, 
the compressed digital product is encrypted using the 
encryption key developed in step 410. Again, amy known 
10 key-based symmetric encryption algorithm can be used 
(as long as the correct complementary algorithm is used 
for decryption on the reader system 106) . One such 
well-known encryption algorithm is DES, described in 
National Institutes of Standards and Technology, "Data 
15 Encryption Standard," FIPS Publication No. 46-1 (January 
19 88) , incorporated by reference herein. Another is 
Triple DES (also known as DES- 3) , and yet another is 
RC-5. RC-5 is described in R. W. Baldwin and R. 
Rivest, "The RC5, RC5 - CBC , ■ RC5-CBC-Pad, and RC5-CTS 
20 Algorithms", INTERNET -DRAFT (March 1996} , available 
from ftp://ftp.nordu.net/internet-drafts/draft-baldwin- 
rc5-00.txt, visited March 4, 1997, incorporated herein 
by reference. 

The result of product encryption step 406 is 
25 referred to herein as an encrypted Version" of the 
digital product. As used herein, a "version" of a 
digital product is still considered to be the digital 
product, because it continues to include all the 
information of the digital product. A native Version" 
3 0 of a product also is nevertheless "the product". A 
digital product can exist in several versions, each of 
which is a reversibly processed version of the native 
version. 
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After the product encryption step 406, in step 
414, the authoring system 102 generates a digest of the 
encrypted product. Any suitable digesting algorithm 
can be used for this purpose including, for example, an 
5 error- correcting code (ECC) generator or the well-known 
SHA-l algorithm. The SHA-l digesting algorithm is 
described National Institute of Standards and 
Technology (NIST) , FIPS Publication 180: Secure Hash 
Standard (SHS) (May 1993), as amended by National 

10 Institute of Standards and Technology (NIST) 
Announcement of Weakness in the Secure Hash Standard 
(May 1994), both incorporated herein by reference. 

In a step 416, the authoring system 102 separates 
one or more "security fragments" in the encrypting 

15 product. The security fragments preferably constitute 
only a small portion of the overall digital prcdv :. \ ? ■ 
for example, 1-5% of the byte count of the ov-r;,. ;.. 
product not to exceed, for example, 30K bytes. The 
number and size of the security fragments can o~ 

20 predetermined and constant for all digital orz'±,\i: c ; 
it can be dynamically selected or optimized ror 
different digital products. It is desir vJ:- ,:: 
minimize the size of the security f racriri3nr.rf T : 
maximizing the effect that their absence would have in 

25 helping to prevent unauthorized usage of the digital 
products. One way of maximizing such effect is to 
include the beginning of the digital product in cne of 
the security fragments. For many encryption algorithms, 
as well as data compression algorithms, it is much more 

30 difficult to decrypt (decompress) the portions that 
remain, if the beginning portion is missing. Also, if 
the digital product includes a header at the beginning, 
absence of the beginning portion of the product often 
makes it difficult to use any. of the remaining portion 
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of the product even if such remaining portion can be 
decrypted. 

In a step 418, the authoring system 102 generates 
a digest of the encrypted product less the security 
5 fragments. Again any digesting algorithm, such as SHA- 
l # can be used in this step. In step 420, the 
authoring system 102 creates a product registration 
package and transmits it to the license server in step 
422. The license registration package can form part of 

10 a digital certificate in one embodiment. The license 
server stores the product registration package and 
returns a product ID to the authoring system 102 (step 
424) . The reason that the security fragments should be 
kept as small as possible is to minimize the storage 

15 capacity requirements of the license server. In a step 
426, the authoring system 102 creates a product 
broadcast package for the digital product and makes it 
available (step 42 8) via any uncontrolled distribution 
network, such as the Internet. 

20 The product registration package, which can also 

be digitally certified, includes the following items: 

• author ID 

• usage parameters (both the free usage 
parameters and the usage parameters at 

25 various purchasable options) 

• the encrypted security fragments 

• a product decryption key (complementary to 
the product encryption key of step 410) 

• the digest of the encrypted product less 
3 0 security fragments 

• digest of the full encrypted product 

The product decryption key referred to above is 
whatever key is required to decrypt the results of the 
encryption process of step 412. For symmetric 
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encryption algorithms, such as for DES or RC-5, the 
product decryption key will be the same as the key used 
for product encryption in step 410; for asymmetric 
encryption algorithms (such as for public key 
5 encryption) , the product decryption key might be 
different than the product encryption key (such as for 
RSA encryption) . in both cases, the product decryption 
key is referred to herein as being ''complementary" to 
the key used for product encryption in step 410. 

10 The product decryption key is the only segment of 

the product registration package which should be 
transmitted to the license server securely. Other 
segments can be transmitted securely if desired or 
convenient, but this is not necessary. Security of the 

15 product decryption key can be ensured, for example, by 
public/private key encryption of the product decryption 
key itself, or by connecting to the license server 104 
via a secure network. 

The product broadcast package contains the 

20 following items. If more than one sub-product is 
included in the product broadcast package, then the 
package contains a set of these items for each sub- 
product . 

product ID 



25 



30 



preview material (unencrypted) 

free usage parameters 

purchasable usage parameter options 

Universal Resource Locator (URL) of license 
server 104 

copyright notice 

contact information for assistance or 
questions 

encrypted product less security fragments 
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As can be seen, whereas the great bulk of the 
product is transmitted via the uncontrolled 
distribution network 108, not only is it encrypted, but 
it is also incomplete so that even if it could be 
5 decrypted, for example by a powerful computer system, 
important fragments of the product simply are not 
there . 

Fig. 5 is a flow chart illustrating the general 
operation of the reader system 106. When a user 

10 installs the reader software on the reader system 106, 
the reader software automatically generates an 
installation ID. The installation ID, which is stored 
on disk in the reader system 106, is a substantially 
unique identifier of the installation. The installation 

15 ID is stored in such a way that if the particular 
installation of the reader system software was to be 
copied to a different system, the installation ID would 
likely be copied as well. 

In a step 502, the customer/user of the reader 

2 0 system 106 downloads the product broadcast package for 
a digital product that he or she wishes to examine. In 
a step 504, the customer performs one or more of the 
freely authorized functions, including a preview of the 
material in the digital product (if available) . For 

25 example, if the digital product is a sound, the preview 
material might be a portion of that sound. If a 
digital product includes a movie, then the preview 
might be a portion of the movie, or a trailer. If the 
digital product is an image, then the preview material 

30 might include a thumb nail of the image. If the 
digital product is text, then the preview material 
might include an abstract. 

In a step 506, the customer chooses to buy a 
license in accordance with one of the license options 
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made available in the usage parameters. In step 508, 
the customer enters his or her identification 
information, payment and contact information. The 
identification information can include the customer's 
5 name, address and phone, or optionally an arbitrary 
privacy ID. Such identification is desirable so that 
the licensing authority can identify the customer if 
and when the customer calls in for support. The 
payment information can include a credit card number 

10 and authorization and/or digital money information. 
Various forms of digital money are described in Daniel 
C. Lynch, "Digital Money" (John Wiley & Sons, 1996) , 
incorporated herein by reference. 

In a step 510, the reader system 106 prepares a 

15 product purchase package described hereinafter, and in 
a step 512, the reader system 106 uploads the product 
purchase package to the license server 104 at the URL 
identified in the product broadcast package. Note that 
multiple or bounce URLs may be available for this 

20 purpose. The product purchase package may be 
transmitted by secure channel and/or encrypted in a 
digital certificate. Assuming the product purchase 
package is in order, then in a step 514, the reader 
system receives the product server download package for 

25 the desired digital product. The product server 
download package need not be transmitted by secure 
channel. In a step 516, the reader system stores the 
product broadcast package on the reader system (or at 
least accessibly to the reader system) in conjunction 

3 0 with the product server download package. Either at 
that time or at a later time, at the customer's 
request, the reader system plays (or otherwise uses) 
the product (step 518) . All further use of the product 
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by the customer occurs on the reader system 106 through 
the reader system software. 

Fig. 6 is a flow chart of the step 510 (Fig. 5) 
in which the reader system 106 prepares the product 
5 purchase package. In a step 602, the reader system 106 
generates a reader system signature (RSS) for the 
reading system 106. The manner in which the RSS is 
generated is described hereinafter. In a step 604, the 
reader system 106 retrieves the previously generated 
10 installation ID, and in a step 606, the reader system 
generates a digest of the encrypted product less the 
security fragments (as obtained from the product 
broadcast package) . The digest performed in step 606 
should be the same as that performed by the authoring 
15 system 102 in step 418 (Fig. 4) . 

In a step 608, the reader system 106 extracts the 
product ID from the product broadcast package and in a 
step 610, the reader system assembles the product 
purchase package. 
2 0 The product purchase package includes the 

following items: 

product ID 

customer's installation ID 



25 



30 



customer's identification information (or 
privacy ID) 

customer's payment information 

customer's contact information (including 
information on where to send the product 
server download package) 

RSS of the reader system 106 

generated digest of the encrypted product 
less security fragments 
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The reader system signature can be generated in 
a number of different ways in different embodiments* 
In one embodiment, the system takes advantage of serial 
numbers or other identifying data which may be present 
5 in the reader computer system, and which carry external 
assurances of substantial uniqueness. That is, many 
computers when manufactured are assigned a serial 
number or other indicator which the manufacturer of the 
computer, or some other authority, guarantees to be 

10 unique. For example, Apple Macintosh computers, when 
manufactured, are assigned an Ethernet address which is 
unique to that specific computer. Alternatively, the 
identifier can be assigned in software, such as in the 
operating system of the computer. It is not essential 

15 that whatever authority assigns the serial number 
guarantee uniqueness; it is sufficient only in that it 
be extremely unlikely that two computer systems which 
can act as reader systems 106 carry the same 
identifier. This is the case where, for example, the 

20 number carries external assurances of substantial 
uniqueness, such as in the case of Ethernet addresses. 

In another embodiment, the reader system 
signature does not rely on a component having an 
identifier that carries external assurances of 

25 substantial uniqueness. Instead, a plurality of 
components (hardware or software) are examined to 
determine individual component signatures. The 
individual component signatures are then combined to 
form the overall reader system signature. In one 

30 embodiment, the individual component signatures are all 
concatenated together in a predetermined sequence to 
form the overall reader system signature. The 
individual component signatures may be digested prior 
to concatenation in order to limit their size to the 
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predefined field size. 



In another embodiment, 



optionally after digesting, the individual component 
signatures are averaged or summed together to form the 



5 component signatures can be weighted prior to 
combination, in order to reduce the impact on the 
reader system signature that would result from changes 
in components that are more frequently subject to 
upgrade or replacement. 

10 In one embodiment, the reader system 106 

generates the reader system signature in dependence 
upon component signatures from the following 
components, to the extent present in the system. 
Except as indicated below, most of the component 

15 signatures set forth in this list are readable either 
from the CMOS or from a device manager driver. This is 
only an illustrative list; other embodiments can refer 
to other components not on this list. 



overall reader system signature. 



The individual 



20 



Hard Disk Drive 



drive ID 



numbers of cylinders, sectors and heads 



drive defective sector map (obtained from 
sector 0) 



25 



drive name 



drive manufacturer 



Floppy Disk Controller 



I/O addresses and settings 



30 



interrupt assignments 



manufacturer name 
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Monitor 

• monitor name 

• monitor type 

5 Display Adapfnr 

• device name 

• on -board memory 



Mother ttn* r ^ 



10 



15 

Ports 



CPU type 
CPU speed . 

total memory present 
total cache present 

cache timings (measured empirically) 

• I/O addresses and settings 

• interrupt assignments 

20 SQUnd, Video and Game rnn trollprq 

• device name 

• driver name 

• driver version 

25 System Devices 

• CMOS profile 

In yet another embodiment, a combination of 
individual component signatures also includes one or 
3 0 more component signatures that carry external 
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assurances of substantial uniqueness, to the extent 
such, a component exists in the machine. 

Fig. 7 is a flow chart illustrating one technique 
for generating the reader system signature for reader 
5 system 106. In a step 704, it is determined whether 
the reader system 106 includes a component which has an 
ID that carries external assurances of substantial 
uniqueness. If so, then the reader system signature is 
given by the component ID of that component (step 706) . 

10 If not, then in step 708, the reader system 106 obtains 
the data regarding the above- listed components to the 
extent present in the reader system 106. In a step 
710, each of the individual component signatures is 
digested, and they are combined in step 712 to form the 

15 reader system signature. 

Returning to Fig. 5, as previously mentioned, 
after the reader system prepares and uploads a product 
purchase package to the license server (step 512) , the 
license server 104, if everything is in order, returns 

20 a product server download package to the reader system 
106 (step 514) . Fig. 8 is a flow chart of the steps 
which takes place in the license server 104 in response 
to receipt of a product purchase package. As used 
herein, steps which take place "in response to" a 

25 predecessor event, do so if the predecessor event 
influenced the performance of such steps. If there is 
an intervening time period, the performance of the 
steps can still be considered "responsive" to the 
predecessor event. If the performance of the steps 

3 0 depends on more than one predecessor event, then the 
steps are considered performed in response to each of 
the predecessor events. 

In a step 802, the license server 104 compares 
the digest from the product purchase package with the 



WO 98/42098 



PCT/US98/04658 



26 



10 



digest of the encrypted product less security fragments 
as stored on the server 104 with the product 
registration package for the product ID referred to in 
the newly received product purchase package. If the 
two digests do not match, then it is very likely that 
either the product broadcast package has been tampered 
with prior to generation of the digest on the reader 
system 106, or the customer is attempting to obtain the 
product server download package fraudulently. In this 
case, the license server 104 returns a package to the 
reader system 106 indicating that the attempt to 
purchase a license was unsuccessful (step 804) . 

If the two digests do match, then in step 806, 
the license server 104 processes the customer's payment 
15 information. If there is an error in this process, 
then again the license server returns an indication to 
the reader system 106 that the customer's attempt to 
purchase a license has been unsuccessful (step 804) . 

20 Assuming the customer's payment information was 

processed successfully, in step 808, the license server 
104 stores the customer's RSS obtained from the product 
purchase package in conjunction with the customer's 
installation ID, also obtained from the product 

25 purchase package. This information need not be stored 
"on" the license server 104 itself, as long as it is 
stored in a manner in which it is "accessible" to the 
license server 104 at a future time. 

In a step 810, the license server 104 performs 

3 0 certain fraud detection checks. This step is optional 
in different embodiments, as indicated by the dotted 
line surrounding the box in Fig. 8. If performed, the 
fraud detection step 810 can include a check of the 
installation ID from the product purchase package 
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against the installation IDs that have been stored 
previously on the license server for other product 
purchases. If a large number of purchases have been 
made using product purchase packages specifying the 
5 same installation ID, then it is likely that someone 
has altered an installation of the reader system 
software and is passing it around to different 
customers who are using it to purchase licenses. The 
same is true if the same license has been purchased 
10 several times from the same installation ID, or if 
several significantly varying reader system signatures 
have been stored in the license server's database in 
conjunction with the same installation ID. A number of 
other fraud detection mechanisms can also be employed. 
15 In any event, an investigation is warranted if step 810 
suggests that an altered version of the reader system 
software might be being distributed. 

The flow chart of Fig. 8 continues after step 810 
with step 9 02 in Pig. 9, as indicated by the symbol "9" 
20 in both Figs. 8 and 9. 

In Fig. 9, in step 902, the license server 104 
further encrypts the already once- encrypted security 
fragments (from the product registration package) using 
the customer's RSS as a key. The key used in step 902 
25 need not be the RSS exactly; it can be some other 
number which depends on the RSS. For example, it can 
be a digest reduction of the RSS from the customer 1 s 
product purchase package. In any event, step 902 
results in "double -encrypted" security fragments from 
3 0 the digital product. 

In step 902, the product decryption key from the 
product registration package is also encrypted using 
the customer's RSS (or a number derived therefrom) as 
a key. Note that in a different embodiment, either 
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step 902 or step 904 can be omitted,, although such an 
omission would likely reduce the security of the 
overall system. 

In a step 906, the license server 104 assembles 
5 the product server download package, and in a step 908, 
it transmits the product server download package back 
to the reader system 106. Processing then resumes in 
the reader system 106 at step 514 (Fig. 5) . 

The product server download package includes the 
10 following items: 

• product ID 

• paid usage parameters 

• payment confirmation information (such as a 
credit card payment confirmation) 

15 # digest of full encrypted product (from the 

product registration package stored on the 
license server 104) 

• encrypted product decryption key (product 
decryption key encrypted with the customer's 

2 0 RSS) 

• double- encrypted security fragments 
(encrypted security fragments further 
encrypted with the customer 1 s RSS) 

Fig. 10 is a flow chart of the step 806 (Fig. 8) , 
25 in which the license server 104 processes the 
customer's payment information. Fig. 10 illustrates 
the process where the customer is paying by credit 
card; a similar process would take place where the 
customer is paying with digital money or in some other 

3 0 payment form. 

In step 1002, the license server 104 transmits 
the charge information to a credit card clearing house. 
The credit card clearing house returns either an 
approval code or an error. In step 1004, if an error 
35 was received, then the license server 104 returns an 
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error to step 806 (Fig. 8) (Step 1006). If an approval 
code was received, then in step 1008 , the license 
server 104 credits the author 1 s account with the amount 
of the approved purchase price less a commission. In 
5 step 1010, the license server 104 returns successfully 
to the step 806 (Fig. 8) . 

Returning to Fig. 5, as previously mentioned, 
each time the customer desires to use the digital 
product, he or she does so using the reader system 

10 software on the reader system 106. Fig. ll is a flow 
chart of the step 518 in which the reader system plays 
the digital product. (The terms "play", "view" and "use" 
are used interchangeably herein as regards a digital 
product.) Referring to Fig. ll, in a step 1102, the 

15 reader system 106 regenerates the RSS for the reader 
system. This step takes place using the same algorithm 
that was used in step 602 (Fig. 6) when the RSS was 
generated for preparation of the product purchase 
package. In a step 804, the reader system 106 decrypts 

20 the double- encrypted security fragments using the new 
RSS as a key. As mentioned with respect to step 9 04 
(Fig. 9) , the key used in step 1104 need not be the RSS 
identically; another number which depends on the RSS 
can be used instead. However, whatever algorithm is 

25 used to derive the key from the RSS in step 1104 should 
be the same as that used in step 904. 

In step 1106, the reader system 106 merges the 
encrypted security fragments into the encrypted product 
less the encrypted security fragments, thereby 

30 assembling a complete, but still encrypted, version of 
the digital product. In step 1108, the full encrypted 
digital product is digested using the same algorithm as 
was used originally by the authoring system 102 in step 
414 (Fig. 4) . In step 1110, the reader system 106 



WO 98/42098 



PCTAJS98/04658 



- 30 - 

determines whether the newly calculated digest matches 
the digest which was provided by the license server 104 
in the product server download package. If so, then 
usage of the product on the reader system 106 is 
5 authorized. Flow continues with the flowchart of Fig. 
12 (as indicated by the number "12" in the small circles 
in both Figs. 11 and 12). If the two digests do not 
match in step 1110, then usage of the product on the 
reader system 106 is not immediately authorized. Flow 
10 continues with the flowchart of Fig. 13, as indicated 
by the number "13" in the small circles in both Figs. 11 
and 13 . 

Referring to Fig. 12, since the two digests match 
in step 1110, the current reader system signature has 

15 been confirmed to be the same as that which was used 
when the reader system 106 first uploaded its produce 
purchase package in step 512 (Fig. 5) . It is also the 
same RSS that was used to encrypt the product 
decryption key as downloaded from the license server 

20 104 to the reader system 106 in steps 908 and 51 \. 
Accordingly, in step 1202, the reader system ICS 
decrypts the product decryption key from the prod\.; - : 
server download package using the current RSS. Again, 
the actual key used to decrypt the product decryption 

25 key in step 1202 need not be identical to the current 
RSS, as long as it is dependent thereon, and as long as 
the algorithm to generate the key is the same as that 
which was used to generate the key with which the 
product decryption key was originally encrypted in step 

30 904 (Fig. 9) . 

In step 1204, the reader system 106 decrypts the 
merged encrypted product using the product decryption 
key that was decrypted in step 1202. In step 1206, if 
the decrypted product was compressed, it is now 
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decompressed using an algorithm complementary to that 
used by the authoring system in step 408 (Fig. 4) . The 
resulting decompressed digital product is transmitted 
in step 1210 to an appropriate viewer. 
5 It will be appreciated that once the digital 

product is transmitted in step 1210 to a viewer, which 
may be any standard viewer appropriate to the content 
of the digital product, the output stream is no longer 
secured by the mechanisms built into the overall system 

10 as described herein. Accordingly, a step 1208 is 
optionally inserted between steps 1206 and 1210 of Fig. 
12. In an embodiment which includes step 1208, a 
fingerprint and/or a watermark is (are) inserted into 
the digital output stream prior to or while it is being 

15 provided to the viewer. Watermarking is a technique 
using a visible identifier that will let the user know 
that he or she has been associated with this particular 
instance of the content. It acts primarily as a 
deterrent. Fingerprinting embeds and hides codes into 

20 the output stream itself that are retrievable only by 
the author or by the licensing authority. Such codes 
uniquely associate the particular copy of the digital 
product with the individual who purchased it. 
Fingerprinting is used primarily for criminal 

25 prosecution and court proceedings. 

If fingerprinting is used, preferably the 
fingerprint is inserted in a manner which does not 
affect the resulting viewing experience. For example, 
if the .output stream includes CD audio, then the 

3 0 fingerprint can be spread over a large number of the 
audio samples, either substituting for the low- order 
bit or modifying the low- order bit in an exclusive OR 
manner in each sample. Alternatively, to avoid 
differential cryptanalysis , the data stream can be 
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transformed into the frequency domain, modified in the 
frequency domain to insert the fingerprint codes, and 
then transformed back to the time domain. Also for 
images, steganographic techniques can be used to insert 
5 the fingerprint into the image. Steganography is 
described in Neil F. Johnson, "Steganography", available 
at http:// adams.patriot.net/ ~johnson/ html/ neil/ 
stegdoc/ stegdoc.html, visited March 4, 1997, 
incorporated by reference herein. The fingerprint to 

10 be inserted in the digital output stream should 
preferably be either the installation ID of the reader 
system 106, or the reader system signature that was 
generated at the time of product usage (step 1102). 
Optionally, the output stream can also be randomly 

15 seeded to further hamper differential cryptanalysis . In 
this manner, if pirated copies of a digital product do 
begin to appear, the author of the product or the 
licensing authority should be able to determine the 
original source of the pirated copies by examining the 

20 fingerprint. 

Returning to Fig. 11, if the two digests do not 
match (step 1110) , then the reader system 106 has 
determined that the newly generated reader system 
signature is not the same as that which was generated 

25 in step 602 (Fig. 6) at the time of product purchase. 
In an aspect of' the invention, this determination does 
not immediately preclude usage of the product by the 
customer on the reader system 106. Instead, proceeding 
in Fig. 13, in a step 1302, the reader system 106 

3 0 prepares a re-validation package. The re -validation 
package can be the same as set forth above with respect 
to the product purchase package, except that the 
customer's payment information can be omitted. In step 
1304, the reader system 106 uploads the re-validation 
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package to the license server 104 at the URL identified 
in the product broadcast package. The license server's 
operations in response to receipt of a re-validation 
package are set forth in Fig. 14. 
5 Referring to Fig. 14, in a step 1402 # it is first 

determined whether the RSS in the re-validation package 
was based on a component in the reader system 106 
having external assurances of substantial uniqueness. 
If so, then re-validation is considered unsuccessful 

10 (step 1404) and this result is returned to the reader 
system 106. If the RSS in the re- validation package 
was not based on a component having external assurances 
of substantial uniqueness, then in step 1406, the 
license server 104 compares the new RSS from the re- 

15 validation package to the RSS previously stored 
accessibly to the server for the same reader system 10 6 
(as identified by the installation ID specified in the 
re-validation package) . If the difference between the 
two RSS 1 s exceeds the threshold that was specified by 

20 the author in the usage parameters stored on the server 
104 for the product ID specified in the re -validation 
package (step 1408) , then, again, re-validation is 
unsuccessful and such a result is returned to the 
reader system 106 (step 1404) . In different 

25 embodiments, the threshold can be specified as a 
percentage of one or the other RSS, or as a number of 
component signatures which differ between the two 
RSS's, or by a number of other different 
specifications . 

30 If the difference between the two RSS f s does not 

exceed the designated threshold (step 1408) , then the 
re- validation is considered successful. The license 
server 104 prepares a new product server download 
package using the same algorithms as set forth above 
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with respect to Pig. 9, but using the new RSS for 
encryption instead of the RSS that was used to download 
the original product server download package upon 
purchase. The new product server download package is 
5 then transmitted back to the reader system 106 with re- 
validation. Optionally, in order to assist 
investigation of any potential fraud, in step 1410, the 
license server 104 also stores the new RSS in 
conjunction with the installation ID specified in the 

10 re-validation package. A history of such ostensible 
reader system upgrades is maintained on the server 104. 

Fig. 15 is a detail of step 1408 (Fig. 14) in 
which the license server 104 determines whether the 
difference between the two RSS's exceeds the threshold 

15 specified by the author in the usage parameters for the 
digital product. The flowchart set forth in Fig. 15 
represents one embodiment, in which the threshold has 
been specified as a percentage. In a step 1502, the 
server 104 calculates the weighted sum of the RSS 

20 received in the product re-validation package. In a 
step 1504, the server 104 makes the same calculation 
with respect to the RSS previously stored on the server 
104. In step 1506, the license server 106 determines 
whether the difference between the two calculated 

25 values exceeds the threshold specified by the author in 
the usage parameters. if so, then in step 1508, the 
routine returns to Fig. 14 affirmatively. If not, then 
in step 1510, the routine returns to Fig. 14 
negatively. 

30 Fi 9- 16 is a detail of step 1408 (Fig. 14) as 

performed in a second embodiment, in which the upgrade 
drift percentage is specified as a maximum number of 
components whose individual component signatures can 
differ between the two RSS's. in step 1602, the server 
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104 counts the number of components of the RSS in the 
re- validation package, which differ from the 
corresponding components of the RSS previously stored 
on the server 106 from the original product purchase 
5 package. If the count exceeds the predetermined drift 
threshold, then the routine returns affirmatively (step 
1606) . If not, then it returns negatively (step 1608) . 

Returning to the reader system flow as 
illustrated in Fig, 13, after the reader system 106 

10 uploads the re-validation package to the license server 
104, in a step 1306, the reader system 106 receives the 
re-validation result. If the re- validation was 
unsuccessful (step 1308) , then the reader system 
displays an error message to the user and requests the 

15 customer to call customer service of the licensing 
authority (step 1310) . In this situation, automatic 
re- validation has failed, and manual re-validation as 
in step 1310 is necessary. During the call, a customer 
service representative can determine whether the 

20 customer 1 s license should be extended to cover the 
reader system 106 as it now stands. If automatic re- 
validation was successful (step 1308) , then the reader 
system returns to step 514 (as indicated by the numeral 
"5" in the small circle in both Figs. 13 and 5) to store 

25 and process the new product server download package in 
the same manner as it processed the original product 
server download package received upon purchase. 

It can be seen that a secure product distribution 
mechanism has been described which takes advantage of 

3 0 the benefits of an uncontrolled distribution network, 
while ensuring that authors and proprietors of digital 
products are paid an appropriate royalty for their 
efforts at creativity. In addition, the mechanism 
ensures that once a customer is licensed to use a 
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digital product on a particular reader system, that 
product cannot be used on any other reader system 
without re-validation. The mechanism allows for a 
certain amount of upgrade drift within which re- 
5 validation can be entirely automated. 

The foregoing description of preferred 
embodiments of the present invention has been provided 
for the purposes of illustration and description. It 
is not intended to be exhaustive or to limit the 

10 invention to the precise forms disclosed. Obviously, 
many modifications and variations will be apparent to 
practitioners skilled in this art. For example, whereas 
the flowcharts described herein illustrate steps being 
performed in a particular sequence, it will be 

15 appreciated that in many instances the sequence of the 
steps can be reversed, or the steps can be performed in 
a pipelined, overlapping manner, or both, withcut 
departing from the scope of the invention. The 
embodiments herein were chosen and described in order 

20 to best explain the principles of the invention and im- 
practical application, thereby enabling others skilled 
in the art to understand the invention for varices 
embodiments and with various modifications as ax- 
suited to the particular use contemplated. It is 

25 intended that the scope of the invention be defined by 
the following claims and their equivalents. 
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CLAIMS. 

1. A method for preparing a digital product for 
controlled distribution using a distribution network, 
5 comprising the steps of: 

encrypting said product; 

separating at least one encrypted fragment from 
said encrypted product ; 

transmitting said encrypted product less said at 
10 least one encrypted fragment onto said distribution 
network; and 

withholding said at least one encrypted fragment 
from said distribution network. 

15 2. A method according to claim 1, further 

comprising the step of transmitting said at least one 
encrypted fragment to a license server. 

3. A method according to claim 2, further 
20 comprising the step of transmitting to said license 

server a decryption key that can be used to decrypt 
said product. 

4. A method according to claim 1, wherein said 
25 encrypted product includes a header portion followed by 

a remainder portion, 

and wherein said step of separating at least one 
encrypted fragment from said encrypted product 
comprises a step of separating from said encrypted 
30 product an encrypted fragment that includes at least 
part of said header portion. 
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5. A method according to claim 1, wherein said 
encrypted product consists of a starting byte followed 
at least logically by all remaining bytes, 

and wherein said step of separating at least one 
5 encrypted fragment from said encrypted product 
comprises a step of separating from said encrypted 
product an encrypted fragment that includes said 
starting byte. 

10 6. A method according to claim 1, wherein said 

encrypted product consists of a plurality of data 
bytes, 

and wherein said at least one encrypted fragment 
consists of not more than five percent of said data 
15 bytes . 

7. A method for controlling usage of a digital 
product, comprising the steps of: 

storing accessibly to a server at least one 
fragment of an encrypted version of said digital 
product ; 

receiving product request information for 
acquisition by a user, of a usage license for said 
digital product; and 

transmitting a version of said at least one 
fragment as stored accessibly to said server to said 
user in response to receipt of said product request 
information, transmissions of said at least one 
fragment to said user in response to receipt of said 
30 product request information being limited to less than 
all of said digital product. 



20 



25 
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8. A method according to claim 7, wherein less 
than all of said digital product is accessible to said 
server. 

5 9. A method according to claim 7, wherein said 

product request information includes payment 
information, 

further comprising a step of transmitting paid 
usage parameters to said user in response to said 
10 receipt of said product request information. 

10. A method according to claim 7 , wherein said 
product request information further includes a digest 
of a portion of a version of said digital product, said 

15 portion being non- co- extensive with said at least one 
fragment, further comprising the steps of: 

storing a digest of said portion accessibly to 
said server prior to said step of receiving product 
request information; and 

20 in response to receipt of said product request 

information, comparing said digest in said product 
request information with said digest stored accessibly 
to said server. 



25 11. A method according to claim 7, wherein said 

product request information further includes a reader 
system signature of a particular reader system, 

further comprising a step of encrypting at least 
one of said at least one fragment as stored accessibly 

3 0 to said server, in dependence upon said reader system 
signature, to form a further encrypted version of said 
at least one fragment as stored accessibly to said 
server, 
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the version transmitted to said user in said step 
of transmitting including said further encrypted 
version of said at least one fragment, 

5 12. A method according to claim 7, wherein said 

product request information further includes a reader 
system signature of a particular reader system, further 
comprising the steps of: 

storing a product decryption key accessibly to 
10 said server prior to said step of receiving product 
request information; 

encrypting said product decryption key in 
dependence upon said reader system signature, to form 
an encrypted product decryption key; and 
15 transmitting said encrypted product decryption 

key to said user in response to receipt of said product 
request information. 



13. A method according to claim 7, wherein said 
20 product request information further includes a first 
reader system signature of a particular reader system, 

further comprising the step of storing said 
reader system signature accessibly to said server, in 
response to receipt of said product request 
25 information; 

and further comprising the steps of, subsequently 
to said step of transmitting: 

receiving a product re-validation request 
identifying said particular reader system and including 
3 0 a second reader system signature; 

determining whether differences between said 
first and second reader system signatures satisfy 
predetermined re-validation criteria. 
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14. A method according to claim 13, wherein said 
differences between said first and second reader system 
signatures satisfy said re-validation criteria, further 
comprising a step of encrypting at least one of said at 

5 least one fragment as stored accessibly to said server, 
in dependence upon said first reader system signature, 
to form a first further encrypted version of said at 
least one fragment, 

the version transmitted to said user in said step 
10 of transmitting including said first further encrypted 
version of said at least one fragment; 

said method further comprising the steps of: 
encrypting said at least one of said at least one 
fragment as stored accessibly to said server, in 
15 dependence Aipon said second reader system signature, to 
form a second further encrypted version of said at 
least one fragment; and 

transmitting said second further encrypted 
version of said at least one fragment to said user in 
20 response to said step of determining. 

15 . A method according to claim 13 , wherein said 
differences between said first and second reader system 
signatures satisfy said re-validation criteria, further 

25 comprising the steps of: 

storing a product decryption key accessibly to 
said server prior to said step of receiving product 
request information; 

encrypting said product decryption key in 
3 0 dependence upon said first reader system signature, to 
form a first encrypted product decryption key; and 

transmitting said first encrypted product 
decryption key to said user in response to receipt of 
said product request information, 
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said method further comprising the steps of: 
encrypting said product decryption key in 

dependence upon said second reader system signature, to 

form a second encrypted product decryption key; and 
5 transmitting said second encrypted product 

decryption key to said user in response to said step of 

determining. 

16. A method for controlled usage of a digital 
10 product, comprising the steps of: 

developing a first signature of a first reader 
system in dependence upon a first group of at least one 
component as present in said first reader system at a 
first time; 

15 at a second time subsequent to said first time, 

developing a second signature of a second reader system 
in dependence upon a second group of at least one 
component present in said second reader system at said 
second time; 

20 using a digital product at said second time if 

and only if said first and second signatures satisfy 
predetermined reader system drift criteria, said 
predetermined reader system drift criteria not 
requiring identity between said first and second 

2 5 signatures. 

17. A method according to claim 16, wherein said 
digital product comprises a sound, and wherein said 
step of using said digital product comprises a step of 

3 0 playing said sound. 

18. A method according to claim 16, wherein said 
digital product comprises software and wherein said 



WO 98/42098 



PCT/US98/04658 



- 43 - 

step of using said digital product comprises a step of 
executing said software. 

19- A method according to claim 16, wherein said 
5 first and second signatures do not satisfy said 
predetermined reader system drift criteria, further 
comprising the steps of: 

manually communicating with a licensing authority 
for re -authorization; and 
10 using said digital product at a time subsequent 

to said second time in response to said re- 
authorization. 



20. A method according to claim 16, wherein said 
15 second reader system is said first reader system. 



21. A method according to claim 16, wherein said 
step of using said digital product at said second time 
if and only if said first and second signatures satisfy 
2 0 predetermined reader system drift criteria, comprises 
the steps of : 

said second reader system making a determination 
that said first and second signatures match; and 

using said digital product in response to 3aid 
25 determination. 



22. A method according to claim 21, further 
comprising the steps of: 

storing accessibly to said second reader system 
3 0 a first digest of at least a covered portion of said 
digital product; and 

storing, at said first time and accessibly to 
said second reader system, at least one fragment of 
said digital product encrypted in dependence upon said 
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first signature, said at least one fragment overlapping 
said covered portion of said digital product, 

and wherein said step of said second reader 
system making a determination that said first and 
5 second signatures match, comprises the steps of: 

decrypting said at least one fragment in 
dependence upon said second signature, to form at least 
one decrypted fragment; 

digesting said covered portion of said digital 
10 product, using said at least one decrypted fragment, to 
form a second digest; and 

comparing said second digest to said first 
digest. 



15 23. A method according to claim 16, further 

comprising the step of storing said first signature 
accessibly to a server different from said second 
reader system, 

and wherein said step of using said digital 

20 product at said second time if and only if said first 
and second signatures satisfy predetermined reader 
system drift criteria, comprises the steps of: 

transmitting said second signature to said 
server; and 

25 said server determining whether said first and 

second signatures satisfy said predetermined reader 
system drift criteria. 

24. A method according to claim 16, wherein said 
30 reader system drift criteria are specified in 
conjunction with said digital product. 



25. A method according to claim 16, wherein said 
first group includes more than one component, and 
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wherein said step of developing a first signature 
comprises the steps of: 

developing a first component signature of each 
respective component in said first group as present in 
5 said first reader system at said first time; and 

combining said first component signatures into a 
first combined signature. 

26. A method according to claim 25, wherein said 
10 second group includes more than one component, and 

wherein said step of developing a second signature 
comprises the steps of: 

developing a second component signature of each 
respective component in said second group as present in 
15 said second reader system at said second time; and 

combining said second component signatures into 
a second combined signature, 

wherein said first and second combined signatures 
constitute numerical combinations, 

2 0 and wherein said step of using said digital 

product at said second time if and only if said first 
and second signatures satisfy predetermined reader 
system drift criteria, comprises the step of using said 
digital product at said second time if and only if said 
25 second combined signature differs from said first 
combined signature by no more than a predetermined 
maximum drift percentage. 

27. A method according to claim 25 , wherein said 

3 0 step of combining comprises a step of concatenating 

said first component signatures into said first 
combined signature, 

wherein said second group includes more than one 
component , 
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and wherein said step of developing a second 
signature comprises the steps of: 

developing a second component signature of each 
respective component in said second group as present in 
said second reader system at said second time; and 

concatenating said second component signature 
into a second combined signature, 

and wherein said step of using said digital 
product at said second time if and only if said first 
and second signatures satisfy predetermined reader 
system drift criteria, comprises the step of using said 
digital product at said second time if and only if a 
count of the number of said second component signatures 
in said second combined signature which differ from 
corresponding first component signatures in said first 
combined signature is no greater than a predetermined 
maximum drift number. 

28. A method according to claim 16, further 
comprising the step of storing a version of said 
digital product accessibly to said second reader 
system, at least a portion of said version being 
encrypted in dependence upon said first signature. 

25 29. A method according to claim 28, wherein said 

step of using said digital product at said second time 
if and only if said first and second signatures satisfy 
predetermined reader system drift criteria, comprises 
a step of decrypting said portion of said version in 

30 dependence upon said second signature. 

30. A method according to claim 16, wherein said 
step of using said digital product comprises the steps 
of : 



20 
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inserting into said digital product a fingerprint 
that substantially uniquely identifies said second 
reader system, said fingerprint being recoverable from 
said digital product; and 
5 using said digital product with said fingerprint 

inserted, 

31. A method according to claim 16, wherein said 
step of using said digital product comprises the steps 
10 of: 

inserting into said digital product a watermark: 
that substantially uniquely identifies said second 
reader system, said watermark being recoverable from 
said digital product; and 
15 using said digital product with said watermark 

inserted. 



WO 98/42098 



PCT/US98/04658 



Product— - 



Usage - 

Parameters 



to Author — 

102-y 



1/13 

License Royalties 



AUTHORING SYSTEM 

Product Compression 
8c Encryption 

Fragment extraction 

Packaging for Broadcast 
& for Server 



Author 
Registration 

, Inf0 
(secure channel) 



Author ID 



Product 



Registration 
Package 



Product 
output - 
stream 
(to viewer) 





Product 




Broadcast 


108-y 


Package 


INSECURE PUBLIC 


DISTRIBUTION 


NETWORK 




Product 




Broadcast 




Package 


106-\ 




READER 


SYSTEM 



Product ID 



Product 
output — — 
stream 
(to viewer) 



Freely Authorized 
Functions 

RSS Generation 

Product Purchase 
Interface 

Product Unlocking 
Fingerprint Insertion 



Product 
Purchase 
Package 

(secure) 



Product 
Server 

Download 
Package 



r 104 



LICENSE SERVER 

Registered Author database 

Product Registration 
Package Storage 

Royalty Payment 
Clearing 

Reader Payment 
Validation 

RSS Storage 



Fraud Detection 



from Reader/User 



License Royalties 

FIG. 1 

SUBSTITUTE SHEET (RULE 26) 



WO 98/42098 



PCT/US98/04658 



2/13 










UJ 




i 






CO 


> o 


h— 1 


on 1 — 




°i 



SUBSTITUTE SHEET (RULE 26) 



WO 98/42098 



PCT/US98/04658 





3/13 




\ 

Authoring System Flow 








r 302 



Author Registrotion 



r 306 



Author enters identification 
information 



r 308 

Author system creates 
Author Registration Package 



r 310 



Author sysl 
Author Regist 
to Licen 


em transmits 
ration Package 
ce Server 




r 312 


Author System receives fie 
stores Author ID from 
License Server 








r 304 



Product A Registration 




FIG. 3 



SUBSTITUTE SHEET (RULE 2g) 



WO 98/42098 



PCT/US98/04658 



4/13 



Authoring System: 
Product Registration 

I 



402 



Author identifies product 
& enters usage parameters 



I 





Extract preview material 


^404 


r 406 
















^-408 


Product Encryption 




Compress 


Product 












Generate product encryption key 














| Encrypt product with product encryption key 


I 

















Generate digest of encrypted product 



1 



Separate security fragments from encrypted product 
I 



-416 



I 



Create Product Registration Package 



418 
420 



J 



Transmit Product Registration Package to Licence Server^ 



422 



I 



Rec eive Product ID from License Server 



Create Product Broadcast Package 



Transmit Product Broadcast Package via Internet 



424 
426 

-428 



FIG. 4 

SUBSTITUTE SHEET (RULE 26) 



WO 98/42098 



PCT/US98/04658 



5/13 



READER: SYSTEM FLOW 



d> 



L 



502 



Customer downloads Product Broadcast Package 



-504 



Customer performs Freely Authorized Functions 
Including Preview if available 



r 506 



Customer chooses to Buy Licence 



\ r 508 


Customer enters identification, 


payment 


8c contact information 


r 510 


Reader System prepares Product 


Purchase Package 


\ rS12 



Reader System uplaods Product Purchase Package 
to License server at URL identified in Product 
Broadcast Package (Secure Channel) 



■514 



Reader System receives Product Server Download Package 



j^16_ 



Reader System stores Product Broadcast Package in 
conjuction with Product Server Download Package 

» ^ 



1 



r S18 



Reader System Plays Product at Customer's Request 



L 



518 



Reader System Plays Produc-t at Customer's Request 



T 



FIG. 5 

SUBSTITUTE SHEET (RULE 26) 



WO 98/42098 



PCT/US98/04658 



6/13 



£570 

Reader System Prepares Product Purchase Package 



r€02 

Generate RSS for Reading System 



{604 

Retrieve Previously Generated Installation ID 



i; ^606 

Generate digest of Encrypted Product Less 
Security Fragments (Obtained from Product 
Broadcast Package) 





rBOa 


Extract Product ID from Product 
Broadcast Package 




r 610 


Assemble Product Purchase Package 



FIG. 6 



SUBSTITUTE SHEET (RULE 26) 



WO 98/42098 



PCT/US98/04658 



7/13 



602 



[ Generate RSS for Reading System j 




706 



YES 



L 



RSS = 
Component 
ID 



708 



OBTAIN DATA REGARDING LISTED 
COMPONENTS PRESENT IN USER'S SYSTEM 



710 



2l 



DIGEST DATA ITEMS 



712 



RSS = COMBINED DATA ITEMS 



( DONE ) 



FIG. 7 



SUBSTITUTE SHEET (RULE 26) 



WO 98/42098 



PCT/US98/04658 



8/13 



License Server: Product Purchase 
Package Received 




Server Stores Customer's RSS in 
Conjuction with Installation ID 

_8'^J , 

j Fraud Detection | 




FIG. 8 



SUBSTITUTE SHEET (RULE 26) 



WO 98/42098 



PCT/US98/04658 



9/13 



CO 

CO j— 

S.I 



CD 



CD ^ 
CD « 

s ^ 



CD 
CO 



-4- O 



o 

c 
I 

CD 

o> 
o 
o 



o 
o 



o 
o 



CO 

c 
o 



CD 

o 




55 



o 



CD 



1 



(E> 





>> 
CD 








CO 


= s 


o 


o 




« to 


CO 


C/l — 
*0 CD 


RS 


CD Cd 


in 


-4~» 






v_ 


>s O 


CD 


=3 




O TD 


o 


c o 






CO 






-4— « 


o 




^ 2 






.E 






— u 

En 
( 


US 


! co 








CD C 


CD 


-C CD 


cn 




a 




i 3 ° 


o 




o 


Ll. 








CD 




CD 




a 








a 




o 




a. 








a 








c 


S 






Doi 








CD 




> 








CD 




CO 








O 




=3 








© 




u 




Q. 




CD 




-Q 




e 




CD 




CO 




CO 








SUBSTITUTE SHEET (RULE 26) 



WO 98/42098 



PCTYUS98/04658 



10/13 
£518_ 





Reader System Plays Product 
at Customer's Request 








r 1102 




Regenerate RSS for Reader System 






r 11Q4 




Decrypt double-encrypted Security Fragments 
with New RSS as key 




r 1106 


Merge Encrypted Security Fragments with 
Encrypted Product Less Encrypted Security Fragments 




1-1108 





Digest Assembled Encrypted Product 



©■ 



NO 



Does 
Digest Match 
Digest from Product Server* 
Downlaod Package' 



.YES 



FIG. 11 



SUBSTITUTE SHEET (RULE 26) 



WO 98/42098 



PCT/US98/04658 



11/12 



CO 




CD 
O 

o 
o 



o 

o 
> 
I 

cd 

CO 
CD 



CD 

ex. 

CD 
CO 

co 



CD 

a 

CD 



s 

50 



CD 
CT> 

O 

o -a 

Q_ CD 

oj o 

Q_ 

O — J 

CD o 

•3-2 

o > m 

Q. CD "2 
ZJ GO f5 

e cd 

CD CO 2 

>n a 



CD ° 

a 

CD 













CO 




CD 




Cd 




d 




o 


CO 


1 1 


§ 


a 




JO 




o 




> 
1 




CD 
Ol 




CO 




CD 




J> 




CD 




O 




CD 




k_ 








CD 




-♦-» 




CO 




>s 




CO 




I— 




CD 








a 




CD 








9n 




SUBSTITUTE SHEET (RULE 26) 



WO 98/42098 



PCT/US98/04658 



12/13 




Server Compares New RSS from Re-Validation 
Package to RSS previously Stored on Server 
for Installation ID Specified in Re-Validation 

Package 




Store new RSS on Server in Conjuction 
with Installation ID; Maintain History 



FIG. 14 

SUBSTITUTE SHEET (RULE 26) 



WO 98/42098 



PCI7US98/04658 



13/13 



1 



_ CO 

cd J!i 

x e 

LU o 

CD O 

oo_ 

CD CD 

!J" CO 



to — 

1.1 



CD CD 

> Ol 

« <" 

CO 

CD O 

CO JC 

C CO 

CD CD 

a ^ 



CO 



CO 



I 2 

O i_ 
O CD 

L. 
CO 

^ * 

c at* 
o * 



CD 

> O 
k. 
CD 
CO 



CO 




CO 


L_ 


or 


CD 


> 






o 


CD 




CO 


CO 






c 


c 


o 


CD 




c 




o 


CD 


Ol 






o 


O 




o 


CO 


o> 




.E 


CO 


"a 




c 


o 


spo 


rev 


CD 
i— 




O 




o 





£1 



CO 
CD 
>- 



CD 




cz 

CD 

or 



CO 



1 



_ CO 

CD co 
CD 

£ °> 



CD o 
OQ. 

CD CD 
J~ CO 



co — 

II 



»- o 

CD CD 

> CL 

CO ^ 

CD O 

CO -C 

c CO 

CD CD 





CO 




CO 




or 


CO 




CD 






CD 


_g 








O 


O 


O 




o 






Z3 




CO 


CD 




> 






CD 


CD 




CO 


-C 




C7> 




CD 











o 


CD 




> 






=3 


CD 


CO 


CO 


-o 


c 


CD 


o 






sz 


ed 


CD 


u 




O 


CO 


CO 


CD 








a 






CO 


rj 




_p 


o 


o 


> 


o 


CD 






1- 


a. 


CD 




> 


CO 


CD 


CO 


CO 


or 




to 



SUBSTITUTE SHEET (RULE 26) 



INTERNATIONAL SEARCH REPORT 



International application No. 
PCT/US98/04658 



A. CLASSIFICATION OF SUBJECT MATTER 
IPC(6) :H04L 9/00 
US CL 380/49 

According to International Patent Classification (IPC) or to both national classification and IPC 



FIELDS SEARCHED 



Minimum documentation searched (classification system followed by classification symbols) 
U.S. : 380/49. 4, 28, 30 



Documentation searched other than minimum documentation to the extent that such documents are included in the fields searched 



Electronic data base consulted during the international search (name of data base and. where practicable, search terms used) 



C. DOCUMENTS CONSIDERED TO BE RELEVANT 



Category • 



Y 

Y. P 

Y 

Y 



Citation of document, with indication, where appropriate, of the relevant passages 



US 5,530,757 A (KRAWCZYK) 25 June 1996, See Fig 3. 

US 5,613,004 A (COOPERMAN ET AL) 18 March 1997 See entire 
document. 

L1TTMANN, M., Planet Graphics is aiming to orbit the Internet, 
Crain's Chicago business 09 December 1996, page 18. 

FEDER, J., Applying Pay-per-View Idea to the Compact Disk 
Business, The New York Times, 30 September 1996, article. 



Relevant to claim No. 



1-3 i 

1-31 
1-31 
1-31 



n Kurt 


her documents are listed in the continuation of Bo* C j_ ) Sec patent family annex. 


Suac.1 CMUeoc.es of cited documents "T* later document published after the mutational filing date or priority 
hpacial categories oi citea aocumeu« ^ ^ ^ m connict W(lh ^ .ppiicauon but cited to under.tand 

•A" iloctintenl defining the general state of the art which is not considered the principle or theory underlying the intention 
in lie tif particular rele* aiicc . 

"X' document of particular relevance; the claimed invenuon cannot oe 
•M' carhei document published on or after die mternauonal Hlmg date considered novel or cannot be comidered to involve an inventive si*p 
■I.* Uucume.it which may ilirow doubt, on pnori.y daunt.) or which » document is uken alone 

cued ... establish die publication date of another citation or other ^ decent of particular relevance; the claimed invenuon cannot be 
1 M Hjcml ie«o»n«« «p«cified» considered to involve an tnvemive step when the document is 

.l^umcm KUruH. M. d.~h~«r«. exhibition ur uUier combined with one or more other .uch documents. »uch combinat.on 

mm§ being obvious to a person skilled in the art 

-p- document published prior 10 the tniemauoiiMl filing dale but later than document member of the same patent family 


Dale of the actual completion of the international search 
05 JUNL 1998 


Date of mailing of the international search report 

0 \ JUL 1998 


Name and mailing address of the ISADS 
Commissioner of Patents and Trademarks 

uox i»cr 

Washington. DC. 2«2.i 1 
Kacsinule No. (703) 305-3230 


AuUronzed officer^£.^.^ /w< ^ j^T^ / -jfa ' £ . . ^yj K . 

X SALVATORE CANC1ALOS1 (J 
Telephone No. (703) 305-1837 



l-tirm 1'CT ISA 210 (second sheelXJuly 1992)* 



THIS PAGE BLANK 



